ZEN.COM

New

ICT Risk Expert (Poland/Remote)

Brak informacji o wynagrodzeniu

SeniorZdalnie·KrakówFull-time

#470319·Dodano 6 dni temu·0

Źródło: ZEN.com

Aplikuj teraz

Tech Stack / Keywords

ICT risk managementDORAISO 27001ISO 31000NIST CSFCOBITCRISCCISA

Podsumowanie oferty

Support ICT risk management at a fintech, identifying, assessing, documenting, and monitoring technology risks. Work with Cyber Security, IT, Engineering, Operations, Business, and Compliance teams to ensure risks are managed in line with risk appetite, business objectives, and regulatory requirements.

Wymagania

Experience in ICT risk management, technology risk, operational risk, information security risk, or a related field.
Experience in fintech, banking, payments, or another regulated financial services environment.
Strong understanding of IT infrastructure, cloud services, applications, technology operations, and information security principles.
Practical experience conducting ICT risk assessments and translating technical issues into clear business risk statements.
Experience maintaining risk registers, assessing inherent and residual risk, defining mitigation plans, and monitoring remediation.
Understanding of risk ownership, risk appetite, risk acceptance, escalation processes, and governance structures.
Ability to challenge technical and business stakeholders constructively and ensure identified risks are managed appropriately.
Knowledge of ICT risk management frameworks and standards, such as ISO 27001, ISO 31000, NIST CSF, or COBIT.
Familiarity with financial services regulatory requirements, particularly DORA and its ICT risk management provisions, where applicable.
Understanding of third-party ICT risk, business continuity, disaster recovery, and operational resilience.
Ability to work independently, prioritize competing activities, and operate effectively in a dynamic fintech environment.
Professional proficiency in English.
Share Gallup test or similar assessment results, if available.

Nice to have:

Experience implementing or improving an ICT risk management framework.
Familiarity with cloud risk, software development lifecycle risks, technology resilience, and critical service dependencies.
Relevant certifications such as CRISC, CISA, ISO 27001 Risk Manager, or other risk management qualifications.
Experience supporting regulatory reviews, risk committees, or supervisory engagements.

Obowiązki

ICT Risk Management Framework:

Develop, maintain, and improve the ICT risk management framework, methodologies, procedures, and assessment criteria.

Risk Identification and Assessment:

Identify and assess risks related to IT infrastructure, applications, cloud services, information security, technology operations, system availability, and third-party dependencies.

Risk Register Management:

Maintain the ICT risk register, including risk descriptions, accountable owners, assessments, mitigation plans, and review dates.

Risk Mitigation and Treatment:

Work with risk owners to define mitigation measures, track remediation, challenge timelines, and escalate overdue or insufficient actions.

Risk Appetite and Reporting:

Support the definition and monitoring of ICT risk indicators, thresholds, and key risk indicators (KRIs).
Prepare risk reports for management stakeholders.

Risk Acceptance:

Coordinate risk acceptance, ensuring residual risks are assessed, documented, justified, and approved by appropriate decision-makers.

Change and Project Risk Assessments:

Assess ICT risks associated with technology changes, new products, system implementations, migrations, and architectural decisions.

Third-Party and Outsourcing Risk:

Support the assessment and ongoing monitoring of risks associated with ICT service providers, cloud providers, critical suppliers, and outsourced technology services.

ICT Resilience and Continuity:

Assess risks related to business continuity, disaster recovery, system availability, recovery capabilities, and technology dependencies.

Incident and Problem Risk Analysis:

Work with Cyber Security and IT teams to assess risks from major incidents, identify recurring weaknesses, and track mitigation actions.

Regulatory Alignment:

Ensure the ICT risk management approach reflects relevant regulatory requirements, including DORA where applicable, and supports the enterprise risk management framework.

Stakeholder Collaboration:

Facilitate discussions between technical teams, business stakeholders, and risk functions to ensure technology risks are understood and managed.

Continuous Improvement:

Identify gaps in risk management practices and improve the quality, consistency, and efficiency of ICT risk assessments and reporting.

Benefity

Real influence on shaping ZEN.COM.
Private medical healthcare.
Internal and external training opportunities.

Opieka zdrowotna

Szkolenia wewnętrzne

ZEN.COM

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz